Topics

1

Intrusion Detection and Prevention / OpenAppSec and OPNsense

« on: December 11, 2023, 10:46:13 pm »

While googling for an OPNsense aware WAF I ran into OpenAppSec. This free WAF supposedly integrates in Crowdsec, so I was instantly curious. Has anybody here has experience running it together with OPNsense? Unfortunately it doesn't integrate with it, nor does it run on Freebsd, so I'm curious about how to implement it as a standalone docker or VM. I must admit that I haven't looked into it much more than the introduction and some lightweight reading, but before diving into it I wanted to ask you guys first.

2

General Discussion / HAProxy / ACME client Plugin cleanup [SOLVED]

« on: November 07, 2023, 12:58:53 pm »

Never mind the below question, found it in /conf/config.xml
Wonder why this isnt cleaned up upon uninstallation. What a mess!

==================

I've been experimenting with both HAProxy and the ACME client, and things have become messy.
So, my first idea would be, uninstall both and start anew. This isnt as straightforward as one would think, because the configs aren't being deleted upon uninstallation of the plugins. So removal and reinstallation doesn't mean a clean set up, all the old and messy configs are still there.
How do I clean up these configs so I can make a fresh start? Where are these configs stored? Hopefully not in some megalithing xml file 

3

23.7 Legacy Series / Replace ISP router DCHP with OPNSense DCHP with no relay option

« on: August 07, 2023, 07:33:29 pm »

Hi everybody, I have a seemingly impossible situation for which I'd like to ask your help.
The situation is as follows.

I have a wireless internet router from my provider, which also serves as a DHCP.
What I'd like to do is, disable the router's DHCP and use the OPNSense one's.
The router has no DHCP relay option, so I can't forward the requests to OPNSense. But, the router being on the WAN side of the OPNSense I don't see how I can serve IP's to the IoT devices that connect to the wireless router.
The IoT devices need to connect to the Home Assistant server on the LAN side of OPNSense, which has a different subnet than the ISP router.

Is there a way to achieve this?

I've tried to make sense of my situation in this drawing

4

23.1 Legacy Series / Static route keeps dropping every 1-2 minutes

« on: June 19, 2023, 02:19:25 pm »

Hi all,

First of all, I'm new to OPNsense, so my question might be based on a lack of knowledge.
My issue is that I have made a static route to a raspberry pi4 that's connected to a wireless AP, but the connection is being reset every few minutes. If I connect to the pi through the AP's wifi, then everything is stable.
What I'm trying to accomplish is this:



I've added a gateway on LAN and a route through it pointing to 192.168.10.3. This basically works, but instable.
Don't see anything happening in logs, but could be that I look in the wrong place.
What am I missing?
Questions? Fire away